Release date:
2026-09-23 10:18:13 UTC
Description:
* SECURITY UPDATE: denial of service via an unbounded number of HTTP/2
request header lines
- debian/patches/CVE-2026-49975.patch: add the max_headers directive
(default 1000) and enforce it in ngx_http_process_request_headers() and
ngx_http_v2_state_process_header(), so a client can no longer drive
unbounded per-request header-list growth over HTTP/2; the counter is
appended to the end of struct ngx_http_request_s (not inside
ngx_http_headers_in_t, which is embedded by value and would shift every
later request field) and max_headers to the end of
ngx_http_core_srv_conf_t, so every existing field offset is preserved
and prebuilt third-party dynamic modules stay ABI-compatible
- CVE-2026-49975
Updated packages:
-
libnginx-mod-http-auth-pam_1.18.0-0ubuntu1.7+tuxcare.els8_amd64.deb
sha:dd7788424fd5eb7fc3be67d68175f5ef7387fa84
-
libnginx-mod-http-cache-purge_1.18.0-0ubuntu1.7+tuxcare.els8_amd64.deb
sha:84848a0745ab89660d3fa51df02a7e45813b499b
-
libnginx-mod-http-dav-ext_1.18.0-0ubuntu1.7+tuxcare.els8_amd64.deb
sha:153f19ab6f37921a17ef9bccf2a23facd3b3f865
-
libnginx-mod-http-echo_1.18.0-0ubuntu1.7+tuxcare.els8_amd64.deb
sha:3af896258d68cbd34531947fb91de3ef33890063
-
libnginx-mod-http-fancyindex_1.18.0-0ubuntu1.7+tuxcare.els8_amd64.deb
sha:1ed222d167dbd73058aca108c3a7b9edd4f167c6
-
libnginx-mod-http-geoip_1.18.0-0ubuntu1.7+tuxcare.els8_amd64.deb
sha:6c4f1d3a2de3e5dbb0660736e29d05d6ecb2697b
-
libnginx-mod-http-geoip2_1.18.0-0ubuntu1.7+tuxcare.els8_amd64.deb
sha:9cef7b412f4bc14dfc23da4afbd268907a5b86f5
-
libnginx-mod-http-headers-more-filter_1.18.0-0ubuntu1.7+tuxcare.els8_amd64.deb
sha:d5bc3a511081b9d9c20b21fd0bcb85cd59a8701f
-
libnginx-mod-http-image-filter_1.18.0-0ubuntu1.7+tuxcare.els8_amd64.deb
sha:4e6c8bb6aed808985fcc23bc2c2b4de1b6309a8e
-
libnginx-mod-http-lua_1.18.0-0ubuntu1.7+tuxcare.els8_amd64.deb
sha:c5aa6a283bd82eba8098c559ef3421c94d363b04
-
libnginx-mod-http-ndk_1.18.0-0ubuntu1.7+tuxcare.els8_amd64.deb
sha:39faa5942931881decd2ac0707df1f515a27fad2
-
libnginx-mod-http-perl_1.18.0-0ubuntu1.7+tuxcare.els8_amd64.deb
sha:3e5ebf0f33e0e2ddda424aadbd5fc711c9ca1b0e
-
libnginx-mod-http-subs-filter_1.18.0-0ubuntu1.7+tuxcare.els8_amd64.deb
sha:add3413fc4a099f90103d4765f247d92a939a388
-
libnginx-mod-http-uploadprogress_1.18.0-0ubuntu1.7+tuxcare.els8_amd64.deb
sha:5456e33debb2ddea0991c82be1c255ec8b1d1327
-
libnginx-mod-http-upstream-fair_1.18.0-0ubuntu1.7+tuxcare.els8_amd64.deb
sha:8520979c09ad3049b98447e6acd4ec36b9bc99e0
-
libnginx-mod-http-xslt-filter_1.18.0-0ubuntu1.7+tuxcare.els8_amd64.deb
sha:d794753ab8ac411c25b66887415c7918b7c7878c
-
libnginx-mod-mail_1.18.0-0ubuntu1.7+tuxcare.els8_amd64.deb
sha:53f8b3c9ce3e52c2df335a59e95622c963405408
-
libnginx-mod-nchan_1.18.0-0ubuntu1.7+tuxcare.els8_amd64.deb
sha:bcf9afe13aff715ecce1dc456bd186ba02c10951
-
libnginx-mod-rtmp_1.18.0-0ubuntu1.7+tuxcare.els8_amd64.deb
sha:94b0ce164cab21d2def589ebfb46773f39625c1e
-
libnginx-mod-stream_1.18.0-0ubuntu1.7+tuxcare.els8_amd64.deb
sha:dbecdce5a91beeba8e0820eb7b9880889f9d9338
-
nginx_1.18.0-0ubuntu1.7+tuxcare.els8_all.deb
sha:b909cc26c3547424428117d5c471ca79eed710be
-
nginx-common_1.18.0-0ubuntu1.7+tuxcare.els8_all.deb
sha:a2c0a127e0e2b281e57fd984c7d49508956c808f
-
nginx-core_1.18.0-0ubuntu1.7+tuxcare.els8_amd64.deb
sha:0f066777a8d93eb52f1fa1a42dcfdf3a47b1232f
-
nginx-doc_1.18.0-0ubuntu1.7+tuxcare.els8_all.deb
sha:1d589340a4a88a803dc0bec0a05b7328fab06a45
-
nginx-extras_1.18.0-0ubuntu1.7+tuxcare.els8_amd64.deb
sha:4601b14df5e504f7051eb33d20bdc070b9f50337
-
nginx-full_1.18.0-0ubuntu1.7+tuxcare.els8_amd64.deb
sha:1b907de0518027137421131347b7202efdb7b17b
-
nginx-light_1.18.0-0ubuntu1.7+tuxcare.els8_amd64.deb
sha:c8e89b23872656117bebe808c51cfed1c153af6b
-
libnginx-mod-http-auth-pam_1.18.0-0ubuntu1.7+tuxcare.els8_arm64.deb
sha:5ac3f829e1b3c15cde137ab0a60fa21a5cdeb7ca
-
libnginx-mod-http-cache-purge_1.18.0-0ubuntu1.7+tuxcare.els8_arm64.deb
sha:cb681350aa5d9bc13f88a96b1debb044a676d308
-
libnginx-mod-http-dav-ext_1.18.0-0ubuntu1.7+tuxcare.els8_arm64.deb
sha:4dc893d997961bf1fe918a10b1a67cdabe673a45
-
libnginx-mod-http-echo_1.18.0-0ubuntu1.7+tuxcare.els8_arm64.deb
sha:a3fb96ecbece65f67c6cb4893373cd2d788dae55
-
libnginx-mod-http-fancyindex_1.18.0-0ubuntu1.7+tuxcare.els8_arm64.deb
sha:f125cd0b9b34cb696f90e0cac825945080040998
-
libnginx-mod-http-geoip_1.18.0-0ubuntu1.7+tuxcare.els8_arm64.deb
sha:fdce959faef0a771e08e432df33a3bf1793905a1
-
libnginx-mod-http-geoip2_1.18.0-0ubuntu1.7+tuxcare.els8_arm64.deb
sha:26f084e18f617d74a4ee0b6ec0f6e5cc94b3802d
-
libnginx-mod-http-headers-more-filter_1.18.0-0ubuntu1.7+tuxcare.els8_arm64.deb
sha:1f524b4948d6b7e0d00fc1cd9a2d3323311982e0
-
libnginx-mod-http-image-filter_1.18.0-0ubuntu1.7+tuxcare.els8_arm64.deb
sha:4b1e208ddf9a1c506d95d72786c3e4efb37af413
-
libnginx-mod-http-lua_1.18.0-0ubuntu1.7+tuxcare.els8_arm64.deb
sha:aa081a898ef18f581041b7998e51c0a0d4e172d9
-
libnginx-mod-http-ndk_1.18.0-0ubuntu1.7+tuxcare.els8_arm64.deb
sha:76bfa409e55bbe204faa49f904ec5c3d0cbf7987
-
libnginx-mod-http-perl_1.18.0-0ubuntu1.7+tuxcare.els8_arm64.deb
sha:a8def1dcab613c4fe7a920f1321b6158c74a2dbc
-
libnginx-mod-http-subs-filter_1.18.0-0ubuntu1.7+tuxcare.els8_arm64.deb
sha:ee7238514ca91794c7815720b417852563d52b29
-
libnginx-mod-http-uploadprogress_1.18.0-0ubuntu1.7+tuxcare.els8_arm64.deb
sha:706fb180df210d141377a5263426d18ee83cef02
-
libnginx-mod-http-upstream-fair_1.18.0-0ubuntu1.7+tuxcare.els8_arm64.deb
sha:1b4adefaf39e8f909bba83290f0671886cf7af49
-
libnginx-mod-http-xslt-filter_1.18.0-0ubuntu1.7+tuxcare.els8_arm64.deb
sha:4b7d960a1abd19fbb98b90d5a8bd8f1e9b9eaec5
-
libnginx-mod-mail_1.18.0-0ubuntu1.7+tuxcare.els8_arm64.deb
sha:6db2edeb8d9409a91251ac29f65393af20b25e11
-
libnginx-mod-nchan_1.18.0-0ubuntu1.7+tuxcare.els8_arm64.deb
sha:fbccc2f72d8ab66d46ff1e954331def9f2cf8a8d
-
libnginx-mod-rtmp_1.18.0-0ubuntu1.7+tuxcare.els8_arm64.deb
sha:630fb00fa404977acea9ed334e84c4b503e97dd3
-
libnginx-mod-stream_1.18.0-0ubuntu1.7+tuxcare.els8_arm64.deb
sha:590d3fdb1b2b4aed1a0bbaa03b4945b1997c5730
-
nginx-core_1.18.0-0ubuntu1.7+tuxcare.els8_arm64.deb
sha:78f0fc9a2b29ac8324ce4cec0ca6c43d2fc6af1f
-
nginx-extras_1.18.0-0ubuntu1.7+tuxcare.els8_arm64.deb
sha:b20ea1ee5bc2672fc7b8f72702c6304d69ebda8c
-
nginx-full_1.18.0-0ubuntu1.7+tuxcare.els8_arm64.deb
sha:864b4997de8ab6deb816d545554f4bd4285b4bdc
-
nginx-light_1.18.0-0ubuntu1.7+tuxcare.els8_arm64.deb
sha:011f884175cce45bdf05ad1516a4fc0d620419ab
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
